Microsoft PC Shield phish from Google Gmail PArt 4

Posted by Dave Yadallee on



/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Malik Magee: Valued Customer, Transaction process entry verified"/=

>
vent">
duled"/>
g/Organization">
>
PCq2p"/>
ght: 1px; height: 0; max-height: 0; width: 0; max-width: 0; opacity: 0; ove=

rflow: hidden;" itemprop=3D"name">Valued Customer, Transaction process entr=

y verified
acing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" cl=

ass=3D"body-container">
=

 

" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:1=

00%;" class=3D""><=

/tr>

itemscope itemtype=3D"http://schema.org/EmailMessage">


ption">Valued Customer, Transaction process entry verified


role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"">
body>

ion: rtl; font-size: 0; padding: 24px 32px; text-align: left; vertical-alig=

n: top;" class=3D"main-container-inner">

>

--000000000000530601064b31ca6f--

Microsoft PC Shield phish from Google Gmail PArt 3

Posted by Dave Yadallee on


=20

















Microsoft PC Shield phish from Google Gmail PArt 2

Posted by Dave Yadallee on






















=20



=20



=20

Microsoft PC Shield phish from Google Gmail PArt 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 19 Feb 2026 14:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vtBT7-00000000JEV-22N4

for dave@doctor.nl2k.ab.ca;

Thu, 19 Feb 2026 14:21:53 -0700

Resent-From: The Doctor

Resent-Date: Thu, 19 Feb 2026 14:21:53 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f73.google.com ([209.85.210.73]:48377)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vt98G-00000000PGX-2YrY

for root@nk.ca;

Thu, 19 Feb 2026 11:52:22 -0700

Received: by mail-ot1-f73.google.com with SMTP id 46e09a7af769-7d4c1b9061eso13724152a34.0

for ; Thu, 19 Feb 2026 10:51:26 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771527080; x=1772131880; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=KZOLjPxyb96u5I72KrqCWAZmcAATraWzDbpeX+1dTTg=;

b=pcHEhg2wPmDC9zXAYWNGYHtD04QaXkXORQwiNt632VzuLvB0/u1LxNsHYQN05Sjnv9

FdpteEZgO91XF3/WZAL0XIbtqbHRtS7nKfXvl2KJaQiZ7RTOFZ3A9u9peem/So8snYlW

+/X0rt7NqZssjZofLIFByfkl5RCQJ0FxeybgVKE+IZ/4qnyF3wToQf8AXlIiGUNH5+/f

EhCvmdB+v9rmzv8HxrAnwZTV0JZOrzNXO0DsmBsmAAye7zuF+t+DCyDmo/v5+bRA8DrR

H6/U3SZQlXjsDAEkZuFvuHaE6xZ9VeOKyMRvAtu0X118qBGat0RWWPx38iDs7N8Bf2wd

bVUg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cellwaya-org.20230601.gappssmtp.com; s=20230601; t=1771527080; x=1772131880; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=KZOLjPxyb96u5I72KrqCWAZmcAATraWzDbpeX+1dTTg=;

b=A8Ob8WYuFmGUBCrdFM3QNUvb3kt4gaGqsbJMShxVCtS7dr90en1+UA8ZW47X+O9BKb

5tp8QtnM1JGjN9ej7WNg1FLX0f7VeBAvxhHAnzSqoUANOFrSiI8XCQFkcarXoAvx2v2o

enujbZ9VbVcGbs0XAM8FMquhWEdwHMAOU+D4bfewg0ASR1OImYjuoSkl5mzwE9b+aTzy

xgSMRaNC55cdc4yZfd2MeKUA+hNngfaDZ+SdeSnbiwSXD0W0Rbuy6tI1WyS9KdPJl134

ddEIYFHX2re9GCChmyj6wosKS1f2I5OgB7O5gMSzyd2wCiMxqdTOWdYMp/5x2giZpJ+O

o2GA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771527080; x=1772131880;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=KZOLjPxyb96u5I72KrqCWAZmcAATraWzDbpeX+1dTTg=;

b=nqILJfBVfi5XmsCDR6TVbJ81yyR9kD1/G82udnJeEsyq4T3zknWaY+9WWwzWbhbLbP

3Ib1cwG09vyixfPk8LrveGH3ayvqydb7dolbUnpw4dv1yXctkya5uEwIxwgEYsKRG6jj

dF/DJFkbkoU1RWb1BIOFTfbN/1n/5t4Q3rGOUebP+l2U2e7YMEn54lE0OUY+EN+nC98l

S3vlKdPnfwz4W8leFJXvWLCaQdaHymTXNtvZwVzgjRAmhB0qTcqJs7DRjWr1rApNlwoc

CDb6hV8LrrrACpvb2bskGMOGNLfN0DMrbiyQW+GxE3UDRuGW7qNKzuiJEnMVgMuhJpsi

cjQg==

X-Forwarded-Encrypted: i=1; AJvYcCX8fEu4K5/EBLT/vH+CUc6cv6PG8fpI4ic6q/QGayXgeMdu8r8BM6nuDOba4ydsb+uoq4FQ@nk.ca

X-Gm-Message-State: AOJu0YzyKSGI7Ol+i8Fp1Sggz5W5soXr7c4FtW+2jHwN4waYJYKlbZfn

VtpbSXkPknLmGxNZQmP9lRwedPlHbnhvtZoKcGZdC2lcp1OCslLmPjaK3dazj83PRgZBZKD2/LH

6feV1sUuBu6Dds3YLxoMRa7/LweoQEJ9Ch+UHbbqi+KSGFw==

MIME-Version: 1.0

X-Received: by 2002:a05:6830:718d:b0:7d1:9da9:c6c with SMTP id

46e09a7af769-7d4c31a653cmt18083409a34.17.1771527080054; Thu, 19 Feb 2026

10:51:20 -0800 (PST)

Reply-To: Malik Magee

Sender: Google Calendar

Message-ID:

Date: Thu, 19 Feb 2026 18:51:20 +0000

Subject: Valued Customer, Transaction process entry verified

From: Malik Magee

Content-Type: multipart/alternative; boundary="000000000000530601064b31ca6f"

X-Spam_score: 15.9

X-Spam_score_int: 159

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Valued Customer, Transaction process entry verified Valued

Customer, Transaction process entry verified Friday Feb 20, 2026 â‹… 12:51am

Mountain Standard Time - Phoenix Transaction Date: Friday, 20 February 2026Transaction

Id: f27b-d0ad-DUDAccount status is active and up to dateValued Customer,This

message confirms that your Microsoft PC Shield membership renews toda [...]





Content analysis details: (15.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

[209.85.210.73 listed in dnsbl.ahbl.org]

[209.85.210.73 listed in dnsbl.ahbl.org]

[209.85.210.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.73 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_93 BODY: 9alpha-pock-3alpha

0.6 J_CHICKENPOX_84 BODY: 8alpha-pock-4alpha

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.73 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Valued Customer, Transaction process entry verified



--000000000000530601064b31ca6f

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



VmFsdWVkIEN1c3RvbWVyLCBUcmFuc2FjdGlvbiBwcm9jZXNzIGVudHJ5IHZlcmlmaWVkDQoNClZh

bHVlZCBDdXN0b21lciwgVHJhbnNhY3Rpb24gcHJvY2VzcyBlbnRyeSB2ZXJpZmllZA0KRnJpZGF5

IEZlYiAyMCwgMjAyNiDii4UgMTI6NTFhbQ0KTW91bnRhaW4gU3RhbmRhcmQgVGltZSAtIFBob2Vu

aXgNCg0KDQoNClRyYW5zYWN0aW9uIERhdGU6IEZyaWRheSwgMjAgRmVicnVhcnkgMjAyNlRyYW5z

YWN0aW9uIElkOiAgDQpmMjdiLWQwYWQtRFVEQWNjb3VudCBzdGF0dXMgaXMgYWN0aXZlIGFuZCB1

cCB0byBkYXRlVmFsdWVkIEN1c3RvbWVyLFRoaXMgIA0KbWVzc2FnZSBjb25maXJtcyB0aGF0IHlv

dXIgTWljcm9zb2Z0IFBDIFNoaWVsZCBtZW1iZXJzaGlwIHJlbmV3cyB0b2RheS4gQSAgDQpjaGFy

Z2Ugb2YgVVNEMzIwLjY2IHdpbGwgYmUgcHJvY2Vzc2VkLiBSZWFjaCB1cyBhdCAxLSg4NTYpICAy

NTAtNjcyMCBmb3IgIA0KYXNzaXN0YW5jZS5Qcm9kdWN0IFNwZWNpZmljYXRpb24gT3ZlcnZpZXc6

UHJvdmlkZWQgQnk6IE1pY3Jvc29mdCBQQyAgDQpTaGllbGRTZWxlY3RlZCBTZXJ2aWNlOiBDb21w

cmVoZW5zaXZlIFByb3RlY3Rpb25DaGFyZ2UgQW1vdW50OiAgDQpVU0QzMjAuNjZUZXJtOiBUaHJl

ZSBZZWFyc1RvdGFsOiBVU0QzMjAuNjZQbGVhc2UgY29udGFjdCBvdXIgQ3VzdG9tZXIgIA0KU2Vy

dmljZSBhdCAxLSg4NTYpICAyNTAtNjcyMCBpZiBuZWVkZWQuV2l0aCBnZW51aW5lIGdyYXRpdHVk

ZSxSb24gIA0KU2hlbHRvbk1pY3Jvc29mdCBQQyBTaGllbGQsIGxsYzIwMjYgQ29tcGFueS4gQWxs

IFJpZ2h0cyBSZXNlcnZlZC5TZXJ2ZXIgaWQ6ICANCmQ2ZTJmZWVmLWRhN2QtNDkwYS1hZjQxLWUw

MDFlMWFjNmFlNw0KDQpPcmdhbml6ZXINCk1hbGlrIE1hZ2VlDQpwcmFqYXBhdGlhamF5c2luZ2g5

NEBjZWxsd2F5YS5vcmcNCg0KR3Vlc3RzDQooR3Vlc3QgbGlzdCBoYXMgYmVlbiBoaWRkZW4gYXQg

b3JnYW5pemVyJ3MgcmVxdWVzdCkNCg0K

--000000000000530601064b31ca6f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

Web/SEO/APP spam from Google Gmail PArt 2

Posted by Dave Yadallee on
From: Sushant Singh

Date: Thu, 19 Feb 2026 23:51:07 +0530

X-Gm-Features: AaiRm50NhdhfM9Z74OqtTdQISzD9OJvALXoKBKx8xZ2m3RJ-66Nna5P7M7iDEmo

Message-ID:

Subject: Improve Your Business Website..!!

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000fd39c4064b315ee2"

Bcc: sushant@mvpcoders.com

X-Original-Sender: sushantofficial9792@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=SKc1MZwK; arc=pass

(i=1); spf=pass (google.com: domain of sushantofficial9792@gmail.com

designates 209.85.220.41 as permitted sender) smtp.mailfrom=sushantofficial9792@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@mvpcoders.com

Precedence: list

Mailing-list: list sushant@mvpcoders.com; contact sushant+owners@mvpcoders.com

List-ID:

X-Spam-Checked-In-Group: sushant@mvpcoders.com

X-Google-Group-Id: 490153821707

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I hope you are doing well. Would you like to upgrade,

repair, or refurbish your website with the latest UI/UX features at minimal

cost, or you'd like to build a new website completely?



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.69 listed in dnsbl.ahbl.org]

[74.125.82.69 listed in dnsbl.ahbl.org]

[74.125.82.69 listed in dnsbl.ahbl.org]

[74.125.82.69 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.69 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[74.125.82.69 listed in will-spam-for-food.eu.org]

[74.125.82.69 listed in will-spam-for-food.eu.org]

[74.125.82.69 listed in will-spam-for-food.eu.org]

[74.125.82.69 listed in will-spam-for-food.eu.org]

[74.125.82.69 listed in will-spam-for-food.eu.org]

[74.125.82.69 listed in will-spam-for-food.eu.org]

[74.125.82.69 listed in will-spam-for-food.eu.org]

[74.125.82.69 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.69 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sushantofficial9792(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.69 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Improve Your Business Website..!!



--000000000000fd39c4064b315ee2

Content-Type: text/plain; charset="UTF-8"



Hi,



I hope you are doing well.



Would you like to upgrade, repair, or refurbish your website with the

latest UI/UX features at minimal cost, or you'd like to build a new website

completely?



I have brilliant web experts, who help you in developing your website and

we can do anything you can imagine on your website.



If you are interested, I can send you some of our created website examples

& price info

Thanks & regards,

Sushant



--000000000000fd39c4064b315ee2

Content-Type: text/html; charset="UTF-8"



Hi,





I hope you are doing well.





Would you like to upgrade, repair, or refurbish your website

with the latest UI/UX features at minimal cost, or you'd like to build a new

website completely?





I have brilliant web experts, who help you in developing your

website and we can do anything you can imagine on your website.





If you are interested, I can send you some of our created

website examples & price info


Thanks & regards,


Sushant





--000000000000fd39c4064b315ee2--

Web/SEO/APP spam from Google Gmail PArt 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 19 Feb 2026 14:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vtBSh-00000000JDQ-2RwB

for dave@doctor.nl2k.ab.ca;

Thu, 19 Feb 2026 14:21:27 -0700

Resent-From: The Doctor

Resent-Date: Thu, 19 Feb 2026 14:21:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f69.google.com ([74.125.82.69]:46134)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vt8lU-00000000NSG-3BxI

for sales@nk.ca;

Thu, 19 Feb 2026 11:28:51 -0700

Received: by mail-dl1-f69.google.com with SMTP id a92af1059eb24-1275c2ae713sf44342061c88.0

for ; Thu, 19 Feb 2026 10:27:53 -0800 (PST)

ARC-Seal: i=3; a=rsa-sha256; t=1771525667; cv=pass;

d=google.com; s=arc-20240605;

b=W/y/5OGRAD4ElHL2HpNgsaHM6h3MMfcFs07DIJpy3LBOHC2LlyCOIed2yw8akb+vhk

aN6CAS2l5pJGfGWwQZYsysT3CxhvfeSVgQrWf25Pk45OQXMsCYLH0ZK3D7dFK672d1fv

wlrVua/vrSKdw/y1zHEIf2k9cwrlv5ogqFFurZyFCp67jFN2+aRJtxymugIEidpEFouQ

NJdAJqG75ngX2UZZ3PtRUDrVt8tLTvl4gfNmDYSzT5IfaOoPSp+/laXab8UFBcLl2L/A

nkjprd+C0ZX+PXG2NKr6KYpR4fZ0kPdNGYJl9gV67aGlNVrzEWaOKZZvshjpulx12YS/

7Y4g==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=H41lcFLZREVca0cMrTr0qiBms4w/78NnVtvAN2jVQYQ=;

fh=DqQHAar89lBpmZJxgaX5kK4Gk54APdfBqZHSqcNPGjs=;

b=hAd6WptjBgsbYZFuqLYXdlGpg0iLOdfzgPqQzqMnV0Elrcno3deUHQ+KQuA2FXtrlQ

XaQ6UFonJh+AxFAgbUZvpt4YU3An5cd0edRs4n3Z6pRrsdH7rNmXScym/gBpEPGFo66I

MZGn4A70spb6rwJJsgGvFWkDLiBXK4uciXenufm2og83dnNTCeapV6VsB2tLCKnpzAVT

UdQe/OHx+BkCfDRdfu8mFSurR0rnxTeIZqbvWl6Z2vxI2RqW1jtbidrV9Bv8FVWv5AkQ

Mv0+IHckTrpKo6W5LhF/IoYgFbhnRVhYFGKBti75OMKSCZpccfbgz/25bYdL2uj0x9r/

cXbg==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=SKc1MZwK;

arc=pass (i=1);

spf=pass (google.com: domain of sushantofficial9792@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sushantofficial9792@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@mvpcoders.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mvpcoders-com.20230601.gappssmtp.com; s=20230601; t=1771525667; x=1772130467; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=H41lcFLZREVca0cMrTr0qiBms4w/78NnVtvAN2jVQYQ=;

b=R7UW2EFVc+ZvSc06jxGnIxvHkQNU0RK8uie641n4brM8NZxXjTP6Lf0/n+hpXMAL9B

IZkyveVO51TSctS0w6kAm+GNjCMfdbbbAM6kCWsHGniQ8dpTB1mLz1sAUZFs7MVMzY5B

5F3FS9ofVyUYhwfDnTIk7olc0Yz8c8zelMlm6mAiqhDwjvjD6jumAUS+xm6m74AM8+eX

qb/4IlFY6xyfOcGiaQrmbAdNksKu8v4gB+GNvNA9efEtmYC3Z8kUubzUA28fLitdWyxw

00U1s/ZdFpciKbBb79qG3lbx7mfIEKpAM9RdcxNMK+2CPHe1gO0Wl5kISGgamaOx1COA

oQJw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771525667; x=1772130467;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=H41lcFLZREVca0cMrTr0qiBms4w/78NnVtvAN2jVQYQ=;

b=qGrAbE6ixL6Jmadlp5BEx+FW3H33c4sIUxNN4atcLsng680yWqMPeGSlT/H5KyE+E2

Z+NIP5TNleD1EBTIgAQw0ceLNyI9feZ1iSVoYTIfVPOe0/i7O76GztJHuXxmfKyaUoL9

GlSevLbuj+AuxkyMVmDcPSIb4wmDfSu3FUXETk0TAh5imAQjjnZBgjlGi8zS/Mi4p9/9

m41lCcI8RJkWB7PGC/ZXnVsqd8H6fuz1cvNEbcTB4Wztz6W4nEOiJttljySvRMljEJWT

e3zXIgNbwk9Ph5gxgy/hFgZ6j/2XOEPfblAdH2tFgXEIfA+t88Tgh+VJbs2P27fx96lx

X7eA==

X-Forwarded-Encrypted: i=3; AJvYcCWv6Etiv7gc3HTbMKxz7mvtTbaSB63AF5KSPsPs14TKHWM7vP4smq3Hy870b7vy8rSj1vDOiA==@nk.ca

X-Gm-Message-State: AOJu0YzsUHMkixpNzkTQjrICqk+kz+eJFIFLfup1zh1JQggOBTGU9H37

0UC9x2ycTbGSwqSDBlhtg//9Dpb2PQ+Dr4FlLEL1J0Xe6h0HdWRdE9DnCpcp/fAN0FM=

X-Received: by 2002:a05:7022:4584:b0:11b:9386:8262 with SMTP id a92af1059eb24-1273ae8d7dbmr8586833c88.47.1771525667244;

Thu, 19 Feb 2026 10:27:47 -0800 (PST)

X-BeenThere: sushant@mvpcoders.com; h="AV1CL+Gb1cs+wTV2qyiKYLTbmyuyNWut8Luy4h6TnSMs6u1IVQ=="

Received: by 2002:a05:701b:4190:20b0:127:5c6e:d9ac with SMTP id

a92af1059eb24-1275c6ed9c1ls1002282c88.0.-pod-prod-02-us; Thu, 19 Feb 2026

10:21:20 -0800 (PST)

X-Forwarded-Encrypted: i=3; AJvYcCWs1RHfKUP3U2R+mJMvrckKJE6rsflV7LtBTzbuCo22JHi5Air70yji7gKkXKVkmpJMgK3Aa4Ht@mvpcoders.com

X-Received: by 2002:a05:7301:1695:b0:2ba:a6e5:4ba7 with SMTP id 5a478bee46e88-2babc4b751emr8992053eec.40.1771525280153;

Thu, 19 Feb 2026 10:21:20 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1771525280; cv=pass;

d=google.com; s=arc-20240605;

b=QBGrWqDk1Vq2Qi5LZXREfVmljyA5RbejAQ3CEO0obxJPbA2dnn+XjuocbrN5dcA4br

0yRXjJD7sRe8Sn3c3P5Hj1I/9UuP1Db8QONOUYBBDV6UBGxDj94gROV/uCG4El2f6GGZ

ErK/HnAmX/lhOIbGBAiZYo4KZRX7bW3WHbIIa3sZ4qvZriS/YUYpP553ZUZ1OyGBORbt

O+k/z3CNeIpXhB4dNW//R5ao+pScbc8wpnajQW8e/CvGJJlMxfSoomNqeOsKbH5/Krm3

TtbXb7JO81qBlD2XrrHU1HMX2RfF9Zxx7Gg4G3wFIHMf+BLC6z6DxL0RIwxvnZLtiWIb

Xy4Q==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=H41lcFLZREVca0cMrTr0qiBms4w/78NnVtvAN2jVQYQ=;

fh=wxZ98NKH+PRzjcqP5SAJhw28kwBJdiLoLJjqk3ycF8o=;

b=g8Ue6hrlAE18y/DHW+NYzU/PfoSjeCHfb5UdNOT6xIvpvKaG1VUjw7qcG5sVTwqLOx

CyFGuzxkTR5r/v+SFJ3jLKJAygkJiCOooQm0HhVsCsc+SVfLU2GTeb8Q+TwoGtZ88VMn

jqriy8GVhcENHtETPF4VSBIhZ045E2XNY58fYbdzhoBgy2acpPYH8bzv8YMpZRLI1wP0

OQ0cZ2L/1PHNlByMEg8wq5BrrjCvArbbRwhnz79U/5ewX3iLrfyY2xnIiprmM4ObTXBe

LHKDJDCAiU8cxkAjpNt0Q2dIm/8N+GMpjFMqCR8dc9SwIKlqMUJj9UYFv8kH663eRbNp

y9TA==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=SKc1MZwK;

arc=pass (i=1);

spf=pass (google.com: domain of sushantofficial9792@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sushantofficial9792@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@mvpcoders.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 5a478bee46e88-2bd2e454343sor1346527eec.27.2026.02.19.10.21.20

for

(Google Transport Security);

Thu, 19 Feb 2026 10:21:20 -0800 (PST)

Received-SPF: pass (google.com: domain of sushantofficial9792@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1771525279; cv=none;

d=google.com; s=arc-20240605;

b=kBdYLTXaRjMRb0GEcWCjbtbIIfXuE7UELS3UP+qAyA0jZbskvFrbzvXF4QEF9Oqy5/

VrtCk5rcw+eUu3JJvGTZWuQ1RSonbxDbWLRDZ5SPMNf5BJl65bamv3d6gZE9E0xdRnIa

weJV8FJRU79GWn1ui/H45AYPHmg63QaQkRCy+oJIJOeBVSwS0lBwIHChizyhISbgSp97

PpdqUtJhdsPvnjRjeuISsICyzxLwjc1vuxHIiPkiE/6OGnSi95jyadhJhGhQafcXhEWm

Au/seAdlyHCu0n0RPaIcgaFOW/qmKJMSo5QsWuRugdpF8EJknRLl/9D+0NCQ1AlpsYM+

mYUg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=H41lcFLZREVca0cMrTr0qiBms4w/78NnVtvAN2jVQYQ=;

fh=wxZ98NKH+PRzjcqP5SAJhw28kwBJdiLoLJjqk3ycF8o=;

b=iBvMHCFB3eF+hEb+IStbDCsZbeaQSNedXm3wZQFnTE1pvjtu19a7BosKEt5YNoY+la

iVF3rHXlWkTYOLcoXCOlxM3/gSusDVYzlXf19e9Ii3VfjH3RD2JFJuzYwwk2IvXBdxB4

Gr4WDSlz9EOOBvA0iurUIN2rNY+GgP8jeZANwhehUSlhHxOQnwCsryygzyDxeQZ5l0zb

6O5pnC3QcZ3yP5Z/doW+Qcn0j3C1iKkSFgXvUcc2xRgfvuFpMafGzsqaMCKSagqxw0SN

YCdcnpb0Igb1va8o/mBrUyKGsZV2voYcr5axLQckZPFRHbbTVKVX3BOIecksXFkI7O3F

csbw==;

darn=mvpcoders.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Forwarded-Encrypted: i=1; AJvYcCVWRNMcVHjPRb2ZLRL8XlGlNE4CZWxrREhZ8oTkIT9ftG9lT5hzQvjIC/c3qEaK1NNP3Rvp2HUD@mvpcoders.com

X-Gm-Gg: AZuq6aIAu4Xugb21CrW5kvzzGBHs0z5hNcWTH3ICqDQqRZRu1o4kjcWha4CooyTZite

bTI4LkqdUuOU/0aUOyMxqZPCC8l42dmCxuPtudPg8tnJ7arL+OYCG95WYlmX1AHVXu6aIc8Yf5e

LGYUgVQYDLsNOwWiFo4nsEdqG5hn0zDlJj3qLW1++Q9PbySMtcHi2gJ6TbmcxbNppfDT+/o+dww

b62OHY6+aBjtrTWqmoktlcbOLqyMgU+8wgWNZ8/7PVgLmazGM6ttNhZ58yUccjJjpdaOKhBIcj+

JrZTBkZ5Hi197clbvWaBgBKoN9LItxKw/YEsNkU6/zvxL4H34g==

X-Received: by 2002:a05:7300:b58a:b0:2ba:a374:c082 with SMTP id

5a478bee46e88-2babc3ac03dmr10582418eec.6.1771525279396; Thu, 19 Feb 2026

10:21:19 -0800 (PST)

MIME-Version: 1.0

Windows safety Suite phish from Google Gmail PArt 4

Posted by Dave Yadallee on

/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Jaron Singh: Membership details available"/>
=3D"object" itemscope itemtype=3D"http://schema.org/Event">
=3D"eventStatus" content=3D"http://schema.org/EventScheduled"/>
op=3D"publisher" itemscope itemtype=3D"http://schema.org/Organization">
a itemprop=3D"name" content=3D"Google Calendar"/>
ventId/googleCalendar" content=3D"AFHSbSlaA1nXUct2JuSQIsdE40"/>
=3D"display: none; font-size: 1px; color: #fff; line-height: 1px; height: 0=

; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow: hidden;" ite=

mprop=3D"name">Membership details available
">
er=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D=

"center" style=3D"width:100%;" class=3D"body-container">

e=3D"" class=3D"" align=3D"left">

=3D"true">  

ble border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" =

align=3D"center" style=3D"width:100%;" class=3D"">

class=3D"" align=3D"left">
ailMessage">

Membership details available


pan>

cing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" cla=

ss=3D"">

px; direction: rtl; font-size: 0; padding: 24px 32px; text-align: left; ver=

tical-align: top;" class=3D"main-container-inner">

ection: ltr; display: inline-block; vertical-align: top; width: 100%;overfl=

ow: hidden; word-wrap: break-word;">
ellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-column-=

table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-layout: fix=

ed;">

lign:top;">
presentation" width=3D"100%" style=3D"table-layout: fixed;">=

=


=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;pad=

ding-bottom:2px;">

sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;color: #3c=

4043; text-decoration: none;" class=3D"primary-text" role=3D"presentation">=

Membership details available

eak-word;;padding-bottom:24px;">

if;font-style: normal; font-weight: 400; font-size: 14px; line-height: 20px=

; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"pr=

imary-text" role=3D"presentation">Thursday Feb 19, 2026=

=E2=8B=85 8:43pm (Central Time - Chicago)

yle=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;=

padding-bottom:24px;">

yle: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-s=

pacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text=

" role=3D"presentation">

Microsoft Windows Safety Suite Transa=

ction Date: Thursday, 19 February 2026
Transaction No: 44b4-bfaf-KKG

=

Your membership continues with active access


ong>Dear Customer,

Your Microsoft Windows Safety Suite subsc=

ription has been auto-renewed for a Three Years term. The charge of $504.99=

will reflect in your bank account within 12 hours.

Thank you for you=

r payment. Our team is available at +1-(856) 250-6720.
>

Payment Records Dashboard

Item:- Pro Care Plan
r>Quantity:- x2
Tenure:- Three Years
Payment Mode:- Confirmed
Char=

ged Amount:- $ 504.99

This email is sent by Microsoft Windows Safety =

Suite as part of your active subscription.

For cancellation or refund=

requests, please contact our support team at +1-(856) 250-6720
trong>.

Thanks again,
Jaide Leasing

This copyright is valid =

until 2026. All rights reserved.
The company is located at 11936 Front S=

t Phoenix Az 85071 United States


ion" content=3D"Microsoft Windows Safety Suite Transaction Date: Thursday, =

19 February 2026Transaction No: 44b4-bfaf-KKGYour membership continues with=

active accessDear Customer,Your Microsoft Windows Safety Suite subscriptio=

n has been auto-renewed for a Three Years term. The charge of $504.99 will =

reflect in your bank account within 12 hours.Thank you for your payment. Ou=

r team is available at +1-(856) 250-6720.Payment Records DashboardItem:- P=

ro Care PlanQuantity:- x2Tenure:- Three YearsPayment Mode:- ConfirmedCharge=

d Amount:- $ 504.99This email is sent by Microsoft Windows Safety Suite as =

part of your active subscription.For cancellation or refund requests, pleas=

e contact our support team at +1-(856) 250-6720.Thanks again,Jaide Leasing=

This copyright is valid until 2026. All rights reserved.The company is loca=

ted at 11936 Front St Phoenix Az 85071 United States"/>

word;;padding-bottom:24px;">

ont-style: normal; font-weight: 400; font-size: 14px; line-height: 20px; le=

tter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primar=

y-text" role=3D"presentation">
cing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;">

class=3D"primary-text" style=3D"font-size: 14px;color: #3c4043; text-decor=

ation: none;font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0;=

padding: 0;">Guests
(Guest list has been hidden at o=

rganizer's request)
=

<=

/tr>

--0000000000003bf940064b2d7fe4--

Windows safety Suite phish from Google Gmail PArt 3

Posted by Dave Yadallee on


=20



=20

















Windows safety Suite phish from Google Gmail PArt 2

Posted by Dave Yadallee on
--0000000000003bf940064b2d7fe4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20

Windows safety Suite phish from Google Gmail PArt 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 19 Feb 2026 09:45:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vt791-00000000Fo1-1bMv

for dave@doctor.nl2k.ab.ca;

Thu, 19 Feb 2026 09:44:51 -0700

Resent-From: The Doctor

Resent-Date: Thu, 19 Feb 2026 09:44:51 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f73.google.com ([209.85.161.73]:49157)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vt4Kr-00000000Lmu-0qub

for doctor@nl2k.ab.ca;

Thu, 19 Feb 2026 06:45:02 -0700

Received: by mail-oo1-f73.google.com with SMTP id 006d021491bc7-66b47c7a795so7274799eaf.2

for ; Thu, 19 Feb 2026 05:44:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771508640; x=1772113440; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=/dckXPUCsy8FdMj1wgydxAi2iadNWUsCLVh6pn1Nq+I=;

b=I2hRkgBhHbxhELWcsV6mMBT9NpKpUHs/bXxt1l+XNxm/FUmzhMxpWssIgwde0Am7qS

RUWld84p36c8b4xa/GfE5QpDJs1GtTYZsKA9WpiFPWlzLWLrCle6JQgHc4wNofdzK9LI

abrK7GLxClUOH15zqkNZSXrJWWvyBL0y98Wen2dAKlJXozzsHzpIRE4KnKajA35dgfcw

ManpcZ8DZWw2vbQDnvyYR8TRUq6/Ti+93U4gJTlsS2AedQf4T0rN4P8RB68/NXoClF0F

gtx3seZdeP9N/EYQ7j39qJRsd0qyOMlu6ceNlwlmN0lCIn7RewIaiQ+Wmxft3mRiDDHu

Z1/g==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=teampccare-org.20230601.gappssmtp.com; s=20230601; t=1771508640; x=1772113440; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=/dckXPUCsy8FdMj1wgydxAi2iadNWUsCLVh6pn1Nq+I=;

b=dQAbrSPEy9w1lsNdHCyYKhvd4w889cESdvypgKpk31QO+lCvulLmHB8xcLwqAXaYAe

/uevD70xqCKxQtyHMJ2P+7bCgfsMj/N9lpFL/400s1fSpe4ykvRqnzqM1Riu8paeNxbG

sIv6eMsx+Zb9BTx8QTDFO04IRqWFn4e6RSXjfgwOe0noIIhOi/HJHgZc3Xw79ShAgP6f

WJ0ZowOVNUIupC/EQl6AidpOREetc51c4JVJXmAfhbihEng2uALv6nr1Lod8APvp9M9x

89Cscg8EwAYVymc+rP3jcgdIxExC9JCxiI5Q3UojzkzlMYqlRLCIjVtUVV5bk6df6lJk

43Qg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771508640; x=1772113440;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=/dckXPUCsy8FdMj1wgydxAi2iadNWUsCLVh6pn1Nq+I=;

b=YeYDDdMs6NCuZ1/Xwr49QXQuG2s6/dlOe44gW/8N8C3gPCNo9qk6BWJD6zl9ehcuF0

mH7d5UtCPcTYFtl7h+qssZaBCW0QKFI5u3Oa9J+jLnV5XJOoRYhHk4TXHAZowJEKz3jR

Zwp3mWrfGpZXxZ3J9LexV8ACL9fzsIDwql75piKwDn0USzu4rkjagP9t39T4g7BBohhH

GOwfV8SzqmZQgKwDteaxHYI091JqI37FEnMxaKSkdS27mhz/2G6XsVIOqJI7o5H4QHn6

vto+loTIgbI3IBl/z7ACIMNzjRJf158k9YtFuQdEJ4wGShjZ2GwG5CZr9FIa4o1zpGQ6

Okuw==

X-Forwarded-Encrypted: i=1; AJvYcCWNgFVhQ/pZf0eskezUyysTqAtza4wWG9xhCDpe90WVgLebQrBpivra9uWXPeJJk50PfosepJQ=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YxzY9VcNg5QSDZIHAauKSlXqESgs9xnzoV3uDg8semJSxmXA5sH

0TLndSE3T3kYlogw8nCqiVqOACW58gWk7iWYa7rAG46MHttHzwfWfcCrvX4ZzRx0fEeaGjbSY3j

s2WLiFJ0D44XUf44y1MLvCM0oZkYcM6GFqXVryyOgAB6hcg==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:1b0a:b0:679:975b:f217 with SMTP id

006d021491bc7-679975bf47cmt9114260eaf.21.1771508640325; Thu, 19 Feb 2026

05:44:00 -0800 (PST)

Reply-To: Jaron Singh

Sender: Google Calendar

Message-ID:

Date: Thu, 19 Feb 2026 13:44:00 +0000

Subject: Membership details available

From: Jaron Singh

Content-Type: multipart/alternative; boundary="0000000000003bf940064b2d7fe4"

X-Spam_score: 14.4

X-Spam_score_int: 144

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Membership details available Membership details available

Thursday Feb 19, 2026 â‹… 8:43pm Central Time - Chicago Microsoft Windows

Safety Suite Transaction Date: Thursday, 19 February 2026Transaction No: 44b4-bfaf-KKGYour

membership continues with active accessDear Customer,Your Microsoft Windows

Safety Suite su [...]



Content analysis details: (14.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

[209.85.161.73 listed in dnsbl.ahbl.org]

[209.85.161.73 listed in dnsbl.ahbl.org]

[209.85.161.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.73 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_55 BODY: 5alpha-pock-5alpha

0.6 J_CHICKENPOX_84 BODY: 8alpha-pock-4alpha

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.73 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.9 REPLYTO_WITHOUT_TO_CC No description available.

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Membership details available



--0000000000003bf940064b2d7fe4

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TWVtYmVyc2hpcCBkZXRhaWxzIGF2YWlsYWJsZQ0KDQpNZW1iZXJzaGlwIGRldGFpbHMgYXZhaWxh

YmxlDQpUaHVyc2RheSBGZWIgMTksIDIwMjYg4ouFIDg6NDNwbQ0KQ2VudHJhbCBUaW1lIC0gQ2hp

Y2Fnbw0KDQoNCg0KTWljcm9zb2Z0IFdpbmRvd3MgU2FmZXR5IFN1aXRlIFRyYW5zYWN0aW9uIERh

dGU6IFRodXJzZGF5LCAxOSBGZWJydWFyeSAgDQoyMDI2VHJhbnNhY3Rpb24gTm86IDQ0YjQtYmZh

Zi1LS0dZb3VyIG1lbWJlcnNoaXAgY29udGludWVzIHdpdGggYWN0aXZlICANCmFjY2Vzc0RlYXIg

Q3VzdG9tZXIsWW91ciBNaWNyb3NvZnQgV2luZG93cyBTYWZldHkgU3VpdGUgc3Vic2NyaXB0aW9u

IGhhcyAgDQpiZWVuIGF1dG8tcmVuZXdlZCBmb3IgYSBUaHJlZSBZZWFycyB0ZXJtLiBUaGUgY2hh

cmdlIG9mICQ1MDQuOTkgd2lsbCAgDQpyZWZsZWN0IGluIHlvdXIgYmFuayBhY2NvdW50IHdpdGhp

biAxMiBob3Vycy5UaGFuayB5b3UgZm9yIHlvdXIgcGF5bWVudC4gIA0KT3VyIHRlYW0gaXMgYXZh

aWxhYmxlIGF0ICsxLSg4NTYpICAyNTAtNjcyMC5QYXltZW50IFJlY29yZHMgRGFzaGJvYXJkSXRl

bTotICANClBybyBDYXJlIFBsYW5RdWFudGl0eTotIHgyVGVudXJlOi0gVGhyZWUgWWVhcnNQYXlt

ZW50IE1vZGU6LSAgDQpDb25maXJtZWRDaGFyZ2VkIEFtb3VudDotICQgNTA0Ljk5VGhpcyBlbWFp

bCBpcyBzZW50IGJ5IE1pY3Jvc29mdCBXaW5kb3dzICANClNhZmV0eSBTdWl0ZSBhcyBwYXJ0IG9m

IHlvdXIgYWN0aXZlIHN1YnNjcmlwdGlvbi5Gb3IgY2FuY2VsbGF0aW9uIG9yIHJlZnVuZCAgDQpy

ZXF1ZXN0cywgcGxlYXNlIGNvbnRhY3Qgb3VyIHN1cHBvcnQgdGVhbSBhdCArMS0oODU2KSAgMjUw

LTY3MjAuVGhhbmtzICANCmFnYWluLEphaWRlIExlYXNpbmdUaGlzIGNvcHlyaWdodCBpcyB2YWxp

ZCB1bnRpbCAyMDI2LiBBbGwgcmlnaHRzICANCnJlc2VydmVkLlRoZSBjb21wYW55IGlzIGxvY2F0

ZWQgYXQgMTE5MzYgRnJvbnQgU3QgUGhvZW5peCBBeiA4NTA3MSBVbml0ZWQgIA0KU3RhdGVzDQoN

Ck9yZ2FuaXplcg0KSmFyb24gU2luZ2gNCnBlYWdhbWU4QHRlYW1wY2NhcmUub3JnDQoNCkd1ZXN0

cw0KKEd1ZXN0IGxpc3QgaGFzIGJlZW4gaGlkZGVuIGF0IG9yZ2FuaXplcidzIHJlcXVlc3QpDQoN

Cg==

Microsoft Security PHish from Google Gmail part 4

Posted by Dave Yadallee on



/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Bernard Rios: Account overview notice"/>
bject" itemscope itemtype=3D"http://schema.org/Event">
ntStatus" content=3D"http://schema.org/EventScheduled"/>
ublisher" itemscope itemtype=3D"http://schema.org/Organization">
rop=3D"name" content=3D"Google Calendar"/>
googleCalendar" content=3D"MG9GDS8MOkLjtowEFcgbR4mxa3"/>
lay: none; font-size: 1px; color: #fff; line-height: 1px; height: 0; max-he=

ight: 0; width: 0; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D=

"name">Account overview notice
padding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" styl=

e=3D"width:100%;" class=3D"body-container">

=3D"" align=3D"left">
&=

nbsp;

=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"c=

enter" style=3D"width:100%;" class=3D""><=

/tbody>

" align=3D"left">
">

Account overview notice


=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"">=


ble>
ble>

rtl; font-size: 0; padding: 24px 32px; text-align: left; vertical-align: to=

p;" class=3D"main-container-inner">
v class=3D"" style=3D"font-size: 13px; text-align: left; direction: ltr; di=

splay: inline-block; vertical-align: top; width: 100%;overflow: hidden; wor=

d-wrap: break-word;">
" role=3D"presentation" width=3D"100%" class=3D"main-column-table-ltr" styl=

e=3D"padding-right: 32px; padding-left: 0;;table-layout: fixed;">
>=


le border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" w=

idth=3D"100%" style=3D"table-layout: fixed;">

padding: 0; text-align: left; word-break: break-word;;padding-bottom:2px;"=

>

weight: 400; font-size: 22px; line-height: 28px;color: #3c4043; text-decora=

tion: none;" class=3D"primary-text" role=3D"presentation">
"name">Account overview notice

size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bott=

om:24px;">

font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2p=

x;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"pr=

esentation">Thursday Feb 19, 2026 =E2=8B=85 9:42pm (Eas=

tern Time - New York)

padding: 0; text-align: left; word-break: break-word;;padding-bottom:24px;"=

>

ght: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: =

#3c4043; text-decoration: none;" class=3D"primary-text" role=3D"presentatio=

n">

Bill Date: Thursday, 19 February 2026
Bill number: b0c6=

-a9ca-671

Your service remains uninterrupted

<=

strong>Dear Customer,

This reminder is to notify you that yo=

ur membership with Microsoft Secure System renews today. A charge of USD414=

.44 will be applied. For support, call 1.856. 209.9554.
>

Subscription Data Dashboard:

Provider Name: Micr=

osoft Secure System
Additional Service: Standard Access Plan
Amount: =

USD414.44
Service Term: 3 Years
Total Amount: USD414.44

Please =

contact Customer Service at 1.856. 209.9554 if you need as=

sistance.

Always grateful,
Katie Parent
Microsoft Secure System=

, llc
2026 Company. All Rights Reserved.
Server id: a9c2daa1-ae2a-4b4=

c-bdff-080768561d36


=3D"Bill Date: Thursday, 19 February 2026Bill number: b0c6-a9ca-671Your ser=

vice remains uninterruptedDear Customer,This reminder is to notify you that=

your membership with Microsoft Secure System renews today. A charge of USD=

414.44 will be applied. For support, call 1.856. 209.9554.Subscription Data=

Dashboard:Provider Name: Microsoft Secure SystemAdditional Service: Standa=

rd Access PlanAmount: USD414.44Service Term: 3 YearsTotal Amount: USD414.44=

Please contact Customer Service at 1.856. 209.9554 if you need assistance.A=

lways grateful,Katie ParentMicrosoft Secure System, llc2026 Company. All Ri=

ghts Reserved.Server id: a9c2daa1-ae2a-4b4c-bdff-080768561d36"/>

k: break-word;;padding-bottom:24px;">

s-serif;font-style: normal; font-weight: 400; font-size: 14px; line-height:=

20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=

=3D"primary-text" role=3D"presentation">
0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;"><=

tr>


text-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased;=

margin: 0; padding: 0;">Guests

(Guest list has been h=

idden at organizer's request)


--000000000000bf9806064b2d787a--

Microsoft Security PHish from Google Gmail part 3

Posted by Dave Yadallee on


=20



=20

















Microsoft Security PHish from Google Gmail part 2

Posted by Dave Yadallee on
-000000000000bf9806064b2d787a

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



QWNjb3VudCBvdmVydmlldyBub3RpY2UNCg0KQWNjb3VudCBvdmVydmlldyBub3RpY2UNClRodXJz

ZGF5IEZlYiAxOSwgMjAyNiDii4UgOTo0MnBtDQpFYXN0ZXJuIFRpbWUgLSBOZXcgWW9yaw0KDQoN

Cg0KQmlsbCBEYXRlOiBUaHVyc2RheSwgMTkgRmVicnVhcnkgMjAyNkJpbGwgbnVtYmVyOiBiMGM2

LWE5Y2EtNjcxWW91ciBzZXJ2aWNlICANCnJlbWFpbnMgdW5pbnRlcnJ1cHRlZERlYXIgQ3VzdG9t

ZXIsVGhpcyByZW1pbmRlciBpcyB0byBub3RpZnkgeW91IHRoYXQgeW91ciAgDQptZW1iZXJzaGlw

IHdpdGggTWljcm9zb2Z0IFNlY3VyZSBTeXN0ZW0gcmVuZXdzIHRvZGF5LiBBIGNoYXJnZSBvZiBV

U0Q0MTQuNDQgIA0Kd2lsbCBiZSBhcHBsaWVkLiBGb3Igc3VwcG9ydCwgY2FsbCAxLjg1Ni4gMjA5

Ljk1NTQuU3Vic2NyaXB0aW9uIERhdGEgIA0KRGFzaGJvYXJkOlByb3ZpZGVyIE5hbWU6IE1pY3Jv

c29mdCBTZWN1cmUgU3lzdGVtQWRkaXRpb25hbCBTZXJ2aWNlOiAgDQpTdGFuZGFyZCBBY2Nlc3Mg

UGxhbkFtb3VudDogVVNENDE0LjQ0U2VydmljZSBUZXJtOiAzIFllYXJzVG90YWwgQW1vdW50OiAg

DQpVU0Q0MTQuNDRQbGVhc2UgY29udGFjdCBDdXN0b21lciBTZXJ2aWNlIGF0IDEuODU2LiAyMDku

OTU1NCBpZiB5b3UgbmVlZCAgDQphc3Npc3RhbmNlLkFsd2F5cyBncmF0ZWZ1bCxLYXRpZSBQYXJl

bnRNaWNyb3NvZnQgU2VjdXJlIFN5c3RlbSwgbGxjMjAyNiAgDQpDb21wYW55LiBBbGwgUmlnaHRz

IFJlc2VydmVkLlNlcnZlciBpZDogYTljMmRhYTEtYWUyYS00YjRjLWJkZmYtMDgwNzY4NTYxZDM2

DQoNCk9yZ2FuaXplcg0KQmVybmFyZCBSaW9zDQpic2RuamRqZjUzQGd1YXJkcGMub3JnDQoNCkd1

ZXN0cw0KKEd1ZXN0IGxpc3QgaGFzIGJlZW4gaGlkZGVuIGF0IG9yZ2FuaXplcidzIHJlcXVlc3Qp

DQoNCg==

--000000000000bf9806064b2d787a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20

Microsoft Security PHish from Google Gmail part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 19 Feb 2026 09:45:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vt78q-00000000FIC-2bMz

for dave@doctor.nl2k.ab.ca;

Thu, 19 Feb 2026 09:44:40 -0700

Resent-From: The Doctor

Resent-Date: Thu, 19 Feb 2026 09:44:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f202.google.com ([209.85.167.202]:42461)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vt4J6-00000000Len-2z52

for doctor@nl2k.ab.ca;

Thu, 19 Feb 2026 06:43:14 -0700

Received: by mail-oi1-f202.google.com with SMTP id 5614622812f47-463a075e0f5so10250825b6e.1

for ; Thu, 19 Feb 2026 05:42:17 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771508531; x=1772113331; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=xX8+0P2PI/kDXr9HB6LnV3qLjTXepMewpb7VqNdT574=;

b=o6o9d8GwzegyM4t1gIb+NF+kxTyKH5+4iv8RLgAlESVf4yEM7TFGXhsdlV1zN/icL6

hjdNYAA0vOl3w+7IQVGWixycmHdNEovB3fGI/jlTeE1ea8+QlXpxBDYHkEidDEAKvVuJ

rPKMnZ0WAyX2XGCbtQ4RClJ20fTzSvJhhJOsgBFQOH2w/zd5Gtj4tTZL9cFOtAsqCq32

7vze+c078Gy37LqGVo+DMVmBFcVFof67Ymv5D2I1AoskdUPk6a6LgJVyIcC8q/EbgzK9

7cgUptguCF4oJtmHQPHy8sGjRP6EaYNPCN/PFcdBhfzkz8gCstB3V3bCswndVbZqQOR7

METg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=guardpc-org.20230601.gappssmtp.com; s=20230601; t=1771508531; x=1772113331; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=xX8+0P2PI/kDXr9HB6LnV3qLjTXepMewpb7VqNdT574=;

b=Bcfc5m4gqoyoURiv8TSr9F+HXUrtbhNL1u/cvJasxO2PQu/mqYonWUcuFaUAk7MtjU

h01usMFUpBKlJ/0osgMNnfjN2wHniEwNHkNB0u3cY4842fEnhxE40uz1cW0KmLlC2jxV

ztiFIyNnmdXdH18OZnhfoH8d8yLAcMFUZAZdmEf+LqDIXN60fvJqHaXg333nVeykcAgi

un/DUJDPznUmMDuwLOoQtz8W1qmP9rJLpbEWy7i1C0sHoDr2+pr+0hajDYOtDk2s0hVN

sM690WrTfn+luoPH20zjwJH9ETgmgpCFbqsbONwK2re/p+/YF7RTi/xeQyvPxD91NVnj

1kNg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771508532; x=1772113332;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=xX8+0P2PI/kDXr9HB6LnV3qLjTXepMewpb7VqNdT574=;

b=IwT3X5dIqjEjdWxXs2fs8G9ccXP1SfbPPB8Czts0VGSizducjX7z9/8LzuPPGV/1pv

pPGje03GxwRBcOsabHmGiJhypMYYuzevwSVl9z05x73dSxdy2djB2UtgGJbt2l/FOFvD

t6GvtLxJGLrylPoMfF0/cZjZSDjdM2JdsIjQFN2OJBq4KXdYrYJJ/uz2S1EVPTBfkOzG

h/gcPC1GvkZzcLN+AVf3wmJNUYNTHSU0eC04VxpuQwVlVhjlf4DzV+EQBEH6Jpn3V5N7

FW9oQ9OezmDL8xe+bmb963NSfaEgzc/ngw7Y3Bxyj8I35kBZIzuAeuPvzbJWySLuJho4

rplg==

X-Forwarded-Encrypted: i=1; AJvYcCWqeLFUn+yrgFK5gJuHtoGps8JTt0gW9kB36HviXOX24I/+2J/NK4bzupOt1efjU61m5XULYQo=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YzlvhiBAaDH1EMx9dLy2y151O7pdcw+GQiyesqZnDBxySZa8V4q

tfFiD6ORtyZk63cDxGS5cN7LyL7e0hQTAMzRRyWgAUNjdZpHi8RtmztkGTbepN59a8jtgWkVVQv

FJl/KndT3gqOy7D9bMg4VCHfy1K58b+GQ5dTcLshZr6SYxQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:171a:b0:453:ea2:36d9 with SMTP id

5614622812f47-46427bcaa08mt1579156b6e.32.1771508531486; Thu, 19 Feb 2026

05:42:11 -0800 (PST)

Reply-To: Bernard Rios

Sender: Google Calendar

Message-ID:

Date: Thu, 19 Feb 2026 13:42:11 +0000

Subject: Account overview notice

From: Bernard Rios

Content-Type: multipart/alternative; boundary="000000000000bf9806064b2d787a"

X-Spam_score: 20.2

X-Spam_score_int: 202

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Account overview notice Account overview notice Thursday Feb

19, 2026 â‹… 9:42pm Eastern Time - New York Bill Date: Thursday, 19 February

2026Bill number: b0c6-a9ca-671Your service remains uninterruptedDear Customer,This

reminder is to notify you that your membership with Microsoft Secure System

renews t [...]



Content analysis details: (20.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.0 HK_RANDOM_FROM From username looks random

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.202 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_84 BODY: 8alpha-pock-4alpha

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.202 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Account overview notice

Web/SEO/App Spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on


--_000_TYZPR04MB4757BB209A1DD9BEC6BD56D3B86BATYZPR04MB4757apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello, doctor@nk.ca

I hope you are doing well.

Are you planning to design or redesign your business website with a modern,=

industry-standard look and feel? Our team specializes in delivering high-q=

uality web solutions tailored to your needs.

Our services include:

Website Design & Redesign (UI/UX, Logo Design, Responsive Design, HTML5)

 Web Development & Programming (PHP, Java, CakePHP, Kohana, Symfony, Zend)

E-commerce Solutions (Magento, Zen Cart, Presta Shop, OpenCart, Shopify, =

Yii, and more)

If you're interested, I would be happy to share our portfolio and pricing d=

etails.



--_000_TYZPR04MB4757BB209A1DD9BEC6BD56D3B86BATYZPR04MB4757apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>











Hello, doctor@nk.ca



I hope you are doing well.



Are you planning to design or redesign your business=

website with a modern, industry-standard look and feel? Our team specializ=

es in delivering high-quality web solutions tailored to your needs.
:p>



Our services include:



Website Design & Redesign (UI/UX, Logo Design,=

Responsive Design, HTML5)



Web Development & Programming (PHP, Java, Cake=

PHP, Kohana, Symfony, Zend)



E-commerce Solutions (Magento, Zen Cart, Presta Sh=

op, OpenCart, Shopify, Yii, and more)



If you're interested, I would be happy to share our =

portfolio and pricing details.











--_000_TYZPR04MB4757BB209A1DD9BEC6BD56D3B86BATYZPR04MB4757apcp_--